03 Attachment 3 SPRS Requirements.docx
DOCX document 14 KB Posted
- Solicitation number
- FA910125RHSST
About this file
This document appears to be an attachment to a federal contract opportunity that provides requirements related to the Supplier Performance Risk System (SPRS). It states that vendors must perform a NIST SP 800-171 self-assessment and upload their score to SPRS in order to handle Controlled Unclassified Information (CUI) on their information systems. This requirement is per DFARS 252.204-7012. The attachment notes that a "basic" NIST SP 800-171 assessment completed within the past three years is required, but there is currently no minimum score needed. Vendors who have completed the assessment and uploaded the score to SPRS can contact the Contracting Officer to request the draft Statement of Objectives for the related federal contract opportunity, which has a Solicitation Number of FA910125RHSST and is for Enterprise High Speed Systems Test Technology (HSST) research, testing, and evaluation.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 03 Attachment 2 Stakeholder Questions and Comments.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
The “Attachment 1 – DRAFT Technical Specification Sheet” is marked Distro Statement D; distribution is only authorized to Department of Defense and U.S. DoD contractors only. Therefore, to handle Controlled Unclassified Information (CUI) on a vendor information system, vendors must perform the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 self-assessment and upload their score to the Supplier Performance Risk System (SPRS).
Per Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012, a contractor’s information system shall be subject to the security requirements NIST SP 800-171 to safeguard covered defense information. For more information, please review DFARS 252.204-7012 and comply with the NIST SP 800-171 DoD Assessment Requirements found at DFARS 252.204-7020. *NOTE: A “basic” NIST SP 800-171 assessment completed within the past three (3) years from today, is required. Currently there is no minimum score needed.
If your company has completed a basic NIST SP 800-171 assessment within the past three years and uploaded the assessment score in SPRS: contact the Contracting Officer via email at brogan.fullmer@us.af.mil to request a copy of the draft Statement of Objectives (SOO). Upon confirmation of your company’s basic NIST SP 800-171 assessment in SPRS, the draft Statement of Objectives will be provided.
File details come from the government source that posted it. Updated .